https://github.com/osquery/osquery logo
#macos
Title
# macos
s

seph

01/27/2023, 3:14 AM
pf
is a bsd package filter. Reading a bit about it, the api is
/dev/pf
. It’s obviously possible to write something 🙂